Home // ICSNC 2015, The Tenth International Conference on Systems and Networks Communications // View article


Implementation of Netflow based Interactive Connection Traceback System

Authors:
Jung-Tae Kim
Ik-Kyun Kim
Koo-Hong Kang

Keywords: Peer-to-Peer; Connection Traceback; Interactive Hacking; Timing-based Traceback

Abstract:
The paper proposes a method and system for finding stepping stones, as well as origins of the advanced cyber attacks based on the interactive connections traceback system. To do so, the traceback system to be installed at the enterprise gateway utilizes distributed netflow collectors that subscribe netflow information from nearby edge routers with command configured to support netflow generation and traceback agents for finding real-time connections from the victim to attacker. By implementing such a system would support the real-time connection traceback of the attack origins for the interactive hacking attacks without any helps of the Internet Service Providers or governmental security organizations.

Pages: 21 to 26

Copyright: Copyright (c) IARIA, 2015

Publication date: November 15, 2015

Published in: conference

ISSN: 2163-9027

ISBN: 978-1-61208-439-8

Location: Barcelona, Spain

Dates: from November 15, 2015 to November 20, 2015